CVE-2021-29133

published 2021-03-24

CVE-2021-29133: Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the…

Priority P4 27 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

EXPLOIT

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
haserl_project	haserl	< 0.9.36	0.9.36
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0
haserl_project	haserl	>= 0 < 0.9.36-r0	0.9.36-r0

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

osv 5.5 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.